This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer File: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer (raw, json) Hash identifier: 4bMaFVULVXhHttWSWiAq9uy2GzAs++DkgMqlXCCP84I= Subject key identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E385134D71CA08C2FB8D3DE58E0FB44 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24635 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:51:34:d7:1c:a0:8c:2f:b8:d3:de:58:e0:fb:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d469867d1d693e79a6a5ee9014e413f039eb50d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:22:48:49:ff:65:f4:5e:7d:23:19:ff:0e: 4d:de:6d:d2:80:d3:70:d3:35:b0:61:73:1b:c9:c0: 49:28:f6:57:c2:79:bd:12:27:03:82:dd:fa:07:a9: a7:bd:54:cb:e6:fd:53:c2:bc:92:24:cb:ef:85:d6: eb:32:64:93:0c:e8:36:b5:9c:f5:b7:3f:0a:c0:e7: a0:fa:dd:99:4b:4e:1f:dc:ac:56:ae:a8:91:99:b4: 17:7f:b8:17:06:e5:7d:40:36:40:75:7c:86:6d:c5: bc:fe:54:97:f3:89:43:16:68:1a:c3:84:de:41:fa: 59:01:be:db:92:fc:36:94:6e:7e:1d:49:d2:64:2e: d3:cf:73:d6:96:30:6d:4e:b0:18:92:61:0c:65:ca: 52:e9:6f:08:8b:aa:b7:90:67:9d:75:7f:d0:de:87: 84:e1:c9:6f:31:ab:a4:ff:b3:3a:bf:7a:a5:1d:c6: 27:17:b7:91:f1:c6:7f:af:19:35:10:70:17:91:bb: e0:99:1f:4b:3d:f9:2b:1a:15:4c:ca:e1:77:3c:62: 56:4d:ba:23:71:29:18:99:6a:19:14:cb:0b:88:e6: 4b:5b:ad:4b:63:91:18:2d:11:90:ff:7c:fa:c0:1b: 81:c5:ed:b7:fb:26:ec:89:67:2f:f8:52:38:ab:b4: 94:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 24635 Signature Algorithm: sha256WithRSAEncryption 70:30:e3:2e:97:a2:28:b5:b4:fc:89:e3:8d:1a:49:69:e4:74: f7:8f:29:06:2e:41:8f:83:d8:6f:ca:03:ed:8b:c1:36:b6:bd: 4c:5c:bb:64:e3:56:98:93:8a:bd:fe:60:0b:f4:c1:35:2e:f4: 9a:b7:05:9c:fc:ec:32:47:97:d4:d0:73:b6:87:cc:be:f7:bf: f3:71:4a:8b:91:da:0a:40:fc:1c:b0:dc:d4:da:2d:8f:f1:e4: e0:4e:1a:f5:f6:75:65:36:74:d1:55:3a:ae:cd:ce:61:de:ad: a9:10:fa:66:e5:b5:43:86:63:d9:6c:ed:4f:8e:23:e3:c9:ad: a4:be:5c:36:99:66:86:e7:d7:09:0b:0f:ae:d4:eb:ff:3a:c1: 11:ed:f6:6a:2c:fa:af:89:8e:7e:64:46:8f:31:f2:c6:d7:29: 1b:35:7a:ef:0c:9a:07:c8:93:8b:8d:e3:49:c3:c5:df:06:bb: de:a5:ae:09:d6:47:7b:40:2d:f6:c2:74:b0:29:29:fe:44:e4: 44:a3:ac:2c:67:9f:c3:d5:93:29:50:99:82:d2:f3:fd:96:80: 35:f5:a5:cd:62:4a:23:f1:62:81:3f:eb:04:c1:94:7b:82:65: 79:3e:64:b2:dc:e1:be:90:a0:a2:27:bb:f2:95:75:8c:24:8f: df:06:64:0d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt+OFE01xygjC+4095Y4PtEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDY5ODY3ZDFkNjkzZTc5YTZhNWVlOTAxNGU0MTNmMDM5ZWI1MGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEUiSEn/ZfRefSMZ/w5N3m3SgNNw 0zWwYXMbycBJKPZXwnm9EicDgt36B6mnvVTL5v1TwrySJMvvhdbrMmSTDOg2tZz1 tz8KwOeg+t2ZS04f3KxWrqiRmbQXf7gXBuV9QDZAdXyGbcW8/lSX84lDFmgaw4Te QfpZAb7bkvw2lG5+HUnSZC7Tz3PWljBtTrAYkmEMZcpS6W8Ii6q3kGeddX/Q3oeE 4clvMauk/7M6v3qlHcYnF7eR8cZ/rxk1EHAXkbvgmR9LPfkrGhVMyuF3PGJWTboj cSkYmWoZFMsLiOZLW61LY5EYLRGQ/3z6wBuBxe23+ybsiWcv+FI4q7SU0wIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFNRphn0daT55pqXukBTkE/A561DYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjL2I0ODVk OS1lZWRjLTQ3MDYtYTllNi00MWRlOTdkYzliNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvYjQ4NWQ5 LWVlZGMtNDcwNi1hOWU2LTQxZGU5N2RjOWI2Yy8xLzFHbUdmUjFwUG5tbXBlNlFG T1FUOERuclVOZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmA7MA0GCSqGSIb3DQEBCwUAA4IBAQBwMOMul6IotbT8 ieONGklp5HT3jykGLkGPg9hvygPti8E2tr1MXLtk41aYk4q9/mAL9ME1LvSatwWc /OwyR5fU0HO2h8y+97/zcUqLkdoKQPwcsNzU2i2P8eTgThr19nVlNnTRVTquzc5h 3q2pEPpm5bVDhmPZbO1PjiPjya2kvlw2mWaG59cJCw+u1Ov/OsER7fZqLPqviY5+ ZEaPMfLG1ykbNXrvDJoHyJOLjeNJw8XfBrvepa4J1kd7QC32wnSwKSn+ROREo6ws Z5/D1ZMpUJmC0vP9loA19aXNYkoj8WKBP+sEwZR7gmV5PmSy3OG+kKCiJ7vylXWM JI/fBmQN -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:04 2026 by rpki-client